SonicWall Endpoint Security Administration Guide
Table of Contents
Device Control
SES allows you to control what USB devices can be connected to or are blocked from connecting to an endpoint. This feature can be used on Windows devices.
SES features a device control option that allows you to prevent malware threats from spreading via USB devices and also to prevent data exfiltration. USB devices are still a big source of malware threats spreading through an environment, and they are often used by insiders to steal sensitive data from an organization.
Device Control lets you manage which external devices can be used with endpoints in your organization. It can be used at tenant level and at the policy level; each device control list is independent of the other. The policy device control takes precedence over the global device control. Use Device Control to:
- Block those external devices that are not required so data leaks are limited.
- Strictly control allowed devices to prevent malicious content from entering your network through external devices.
To view and download the Device Control settings
Navigate to Policy > Device Control.
The table below shows the device control files list in detail:
| Options | Description |
|---|---|
| Tenant | Displays the tenant's details. |
| Group | Displays the group's details. |
| Name | Displays the device name. |
| Description | Displays the file description. |
| GUID |
Displays the GUID. |
| Instance ID | Displays the Instance ID. |
| Product ID | Displays the Product ID. |
| Vendor ID | Displays the Vendor ID. |
| Status |
Displays the status (Enabled or Disabled). |
| Action | Displays the Block or Unblock Status. |
| Updated At | Displays the date and time the entry was last updated. |
| Created At | Displays the date and time the entry was created. |
To refine the search for specific issues, click on the Filter icon. It expands and you can select a combination of parameters to filter against.
You also have the options:
- All Related Scopes: Click drop-down to choose the below options:
- This Scope and its ancestors
- This scope and its descendants
- Table Action: Select the file and click the Table Action to choose the following actions
- Enable Rule
- Disable Rule
- Delete Rule
- Download: Click Download to get the device control details in CSV file.
- Clear: Click Clear to refresh data.